Owner

PyCQA

14 indexed repositories · View on GitHub

bandit
Bandit is a tool designed to find common security issues in Python code.

Python · 8272 stars
isort
A Python utility / library to sort imports.

Python · 6954 stars
pycodestyle
Simple Python style checker in one Python file

Python · 5167 stars
flake8
flake8 is a python tool that glues together pycodestyle, pyflakes, mccabe, and third-party plugins to check the style and quality of some...

Python · 3823 stars
pyflakes
A simple program which checks Python source files for errors

Python · 1459 stars
flake8-bugbear
A plugin for Flake8 finding likely bugs and design problems in your program. Contains warnings that don't belong in pyflakes and pycodest...

Python · 1119 stars
autoflake
Removes unused imports and unused variables as reported by pyflakes

Python · 953 stars
mccabe
McCabe complexity checker for Python

Python · 681 stars
docformatter
Formats docstrings to follow PEP 257

Python · 598 stars
flake8-import-order
Flake8 plugin that checks import order against various Python Style Guides

Python · 280 stars
eradicate
Removes commented-out code from Python files

Python · 218 stars
flake8-pyi
A plugin for Flake8 that provides specializations for type hinting stub files

Python · 83 stars
bandit-action
GitHub Action to run Bandit

30 stars
vscode-bandit
A Visual Studio Code extension with support for the Bandit static analysis tool.

Python · 9 stars

Beginner friendly Everything

Open All

Remove Python <3.9 fallback for `ast.Index` Open

Difficulty 2/5 1-3 hours Newbie friendliness 65/100

PyCQA/pyflakes#873 · Opened Sep 19, 2026
multi_line_output=10 emits unparsable code when an import has a trailing comment Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

PyCQA/isort#2650 · Opened Sep 4, 2026
isort disagrees with black on wrapping over-long star imports Open

Difficulty 3/5 1-2 days Newbie friendliness 74/100

PyCQA/isort#2649 · Opened Sep 3, 2026
Attribute docstring + top-level def: 'two blank lines' rule (12.1.1) only fires in the first half of the token stream (buggy loop bound, ruff/Black ping-pong) Open

fresh

Difficulty 2/5 1-3 hours Newbie friendliness 88/100

PyCQA/docformatter#383 · Opened Aug 31, 2026
Sorting a literal drops a trailing comment, and raises if the comment contains "=" Open

Difficulty 2/5 1-3 hours Newbie friendliness 78/100

PyCQA/isort#2646 · 2 comments · Opened Aug 29, 2026
Indentation characters of the original code are not preserved Open

fresh

Difficulty 3/5 1-2 days Newbie friendliness 72/100

PyCQA/docformatter#379 · Opened Aug 20, 2026
ValueError: start precedes previous end, for a backslash line continuation after a reformatted docstring Open

fresh

Difficulty 3/5 1-2 days Newbie friendliness 68/100

PyCQA/docformatter#377 · Opened Aug 19, 2026
Make `_Config` and `Config` work as native class Open

Difficulty 5/5 Over a week Newbie friendliness 45/100

PyCQA/isort#2629 · 1 comment · Opened Aug 16, 2026
Test issue Open

Difficulty 5/5 Over a week Newbie friendliness 1/100

PyCQA/bandit#1468 · Opened Aug 15, 2026
Baseline matching ignores line number and uses set membership, not count Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 75/100

PyCQA/bandit#1467 · 1 comment · Opened Aug 15, 2026
1.7.8 crashes with a tokenize ValueError on a multi-line f-string inside parentheses Open

C: convention P: bug U: high

Difficulty 3/5 1-2 days Newbie friendliness 74/100

PyCQA/docformatter#367 · 1 comment · Opened Aug 8, 2026
1.7.8 rewrites the contents of a non-docstring triple-quoted string, silently changing its value Open

C: convention P: bug U: high

Difficulty 3/5 1-2 days Newbie friendliness 72/100

PyCQA/docformatter#366 · Opened Aug 8, 2026
Deprecate inspection of shebang lines to determine if file is supported Open

PyCQA/isort#2607 · 2 comments · 1 assignee · Opened Aug 3, 2026
B501 and B113 skip requests.request(), while httpx.request() is checked Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

PyCQA/bandit#1465 · 1 comment · Opened Jul 30, 2026
Use `Never` for return types Open

type-feature

Difficulty 3/5 1-2 days Newbie friendliness 52/100

PyCQA/flake8-pyi#551 · Opened Jul 22, 2026
Troubles with conflicting cryptography and cffi Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 42/100

PyCQA/bandit#1461 · 3 comments · Opened Jul 21, 2026
`--sort-reexports` does not retain trailing commas in short `__all__` exports Open

PyCQA/isort#2578 · 1 reaction · 2 assignees · Opened Jul 12, 2026
New tag/release Open

enhancement

Difficulty 2/5 1-3 hours Newbie friendliness 68/100

PyCQA/bandit-action#31 · Opened Jul 8, 2026
Extension hangs indefinitely when bandit subprocess cannot reach pip index behind corporate proxy Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

PyCQA/vscode-bandit#132 · Opened Jul 1, 2026
No way to configure per-folder bandit settings in monorepo (multi-root workspace) Open

Difficulty 4/5 3-5 days Newbie friendliness 55/100

PyCQA/vscode-bandit#131 · Opened Jul 1, 2026
Feature request: Adding Canary Credentials to detect supply chain compromise Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 25/100

PyCQA/bandit#1432 · Opened Jun 1, 2026
`bandit -ii -ll -ii -ll` raises an `IndexError` Open

bug

Difficulty 2/5 1-3 hours Newbie friendliness 68/100

PyCQA/bandit#1423 · 1 comment · Opened May 22, 2026
docformatter deadlock with ruff-format: blank lines around nested definitions Open

fresh

Difficulty 3/5 1-2 days Newbie friendliness 68/100

PyCQA/docformatter#354 · 3 reactions · Opened May 22, 2026
The docformatter adds blank line between ocstring and async with block (conflicts with Ruff (pydocsyle)) Open

C: convention P: bug U: high

Difficulty 3/5 1-2 days Newbie friendliness 68/100

PyCQA/docformatter#351 · 1 comment · Opened May 19, 2026
Extension crash with: PackageNotFoundError: No package metadata was found for bandit Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 55/100

PyCQA/vscode-bandit#125 · Opened May 12, 2026
Y002 rejects "if x and (y or z)" Open

type-bug

Difficulty 3/5 1-2 days Newbie friendliness 52/100

PyCQA/flake8-pyi#542 · 1 comment · Opened May 9, 2026
Docformatter produces error when parsing docstring with Ruff noqa at the end Open

C: stakeholder P: enhancement U: low

Difficulty 3/5 1-2 days Newbie friendliness 65/100

PyCQA/docformatter#346 · Opened May 7, 2026
Inconsistent extra blank line after function docstring? Open

C: convention P: bug U: high

Difficulty 3/5 1-2 days Newbie friendliness 48/100

PyCQA/docformatter#345 · 1 reaction · Opened May 4, 2026
docformatter-v1.7.8 mangles r-strings Open

C: convention P: bug U: high

Difficulty 3/5 1-2 days Newbie friendliness 55/100

PyCQA/docformatter#343 · 3 comments · 5 reactions · Opened Apr 29, 2026
B704 false negative for local Markup subclasses (CVE-2025-54384) Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 48/100

PyCQA/bandit#1405 · 2 comments · Opened Apr 28, 2026
B701: Extend Jinja2 checks to cover dynamic template source execution Open

enhancement

Difficulty 3/5 1-2 days Newbie friendliness 56/100

PyCQA/bandit#1404 · 3 comments · 3 reactions · Opened Apr 28, 2026
Proposal: Detecting Flask file-serving API misuse Open

enhancement

Difficulty 3/5 1-2 days Newbie friendliness 67/100

PyCQA/bandit#1403 · 1 comment · 3 reactions · Opened Apr 28, 2026
Feature request (with my own implementation): add a plugin which detects common SSRF cases where user-controlled URLs flow into outbound HTTP requests Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 35/100

PyCQA/bandit#1401 · 2 reactions · Opened Apr 27, 2026
Methods to Bypass Bandit Detection Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 45/100

PyCQA/bandit#1399 · 2 comments · Opened Apr 20, 2026
False negative: narrow argument-shape checks in B508/B509 Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 68/100

PyCQA/bandit#1397 · 2 comments · Opened Apr 19, 2026
False negative: B104 misses `bind(("", port))` wildcard host Open

bug

Difficulty 2/5 1-3 hours Newbie friendliness 72/100

PyCQA/bandit#1395 · 1 comment · Opened Apr 19, 2026
False negative: B501 misses `verify=False` on `requests.Session` / `httpx.Client` instance methods Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 68/100

PyCQA/bandit#1394 · Opened Apr 17, 2026
False negative: B202 unsafe `tarfile.extract()` not detected Open

bug

Difficulty 2/5 1-3 hours Newbie friendliness 72/100

PyCQA/bandit#1392 · Opened Apr 17, 2026
False negative: B103 fails to detect dangerous permissions set via stat module constants Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 68/100

PyCQA/bandit#1390 · Opened Apr 15, 2026
False Negatives in B105/B106/B107 Hardcoded Password Detection Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 62/100

PyCQA/bandit#1383 · 1 comment · Opened Apr 7, 2026
Follow-up on GHSA-ggq6-wv5j-cpfg Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 25/100

PyCQA/bandit#1381 · Opened Apr 1, 2026
Action dependencies not pinned to full-length commit SHAs Open

enhancement

Difficulty 2/5 1-3 hours Newbie friendliness 76/100

PyCQA/bandit-action#28 · Opened Mar 27, 2026
Unclear FAQ entry regarding "Under Which Version of Python Should I Install Bandit?" Open

enhancement

Difficulty 3/5 1-2 days Newbie friendliness 35/100

PyCQA/bandit#1375 · Opened Mar 23, 2026
[Security] tarfile.extractall without member validation in examples/tarfile_extractall.py Open

Difficulty 2/5 1-3 hours Newbie friendliness 84/100

PyCQA/bandit#1373 · 1 comment · Opened Mar 16, 2026
Flag logging/printing of likely sensitive information Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 25/100

PyCQA/bandit#1371 · Opened Mar 15, 2026
Feature Request: add support for global config using $XDG_CONFIG_HOME Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

PyCQA/isort#2465 · 1 comment · Opened Mar 6, 2026
Support explicit lazy imports in Python 3.15 (PEP 810) Open

enhancement help wanted

Difficulty 4/5 3-5 days Newbie friendliness 48/100

PyCQA/isort#2462 · 4 comments · 3 reactions · Opened Feb 25, 2026
B042 has naive definition of exception Open

Difficulty 3/5 1-2 days Newbie friendliness 42/100

PyCQA/flake8-bugbear#538 · 2 comments · Opened Feb 13, 2026
Suppressing B105 on a multiline dict assignment Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 42/100

PyCQA/bandit#1352 · 1 comment · Opened Jan 24, 2026
`--fss` may lead to incorrect import separation for mixed multi-line and alias imports Open

Difficulty 4/5 3-5 days Newbie friendliness 38/100

PyCQA/isort#2455 · 10 comments · Opened Jan 22, 2026

Showing the newest 100

This page lists what was indexed most recently. Advanced filter has the whole inventory, narrowed by language, difficulty and how long a task takes.

Open advanced filter

PyCQA

Showing the newest 100

Get new issues in your inbox